Bugcrowd
41 Case Studies
A Bugcrowd Case Study
DigitalOcean needed to scale its security testing beyond its private program so internal teams could focus on running and securing the cloud while external researchers hunted for vulnerabilities. The challenge was finding a broader breadth of skills, detecting issues faster, and maintaining consistent, productive interactions with security researchers.
By launching a public program on Bugcrowd, DigitalOcean tapped the platform’s full crowd of researchers and set bounties of $150–$2,500 per bug for issues in https://api.digitalocean.com and https://cloud.digitalocean.com. The result has been faster vulnerability discovery, a shorter window to detect issues, consistent communications with researchers, and actionable, validated reports delivered to development teams.
Nick Vigier
Director of Security